A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers
Repository Index
75,859 visible repositories in the index
49–72 of 95 · Most stars
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
- poc
- vulnerability-scanner
- poc-bomber
- cve
针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具
- spring
- spring-boot
- spring-vulnerability
- springboot
Striker is an offensive information and vulnerability scanner.
- cloudflare
- information-gathering
- recon
- theharvester
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
- pyt
- control-flow-graph
- static-analysis
- python
Translate GPU shaders and compute kernels between GLSL, HLSL, Metal, SPIR-V, Slang, CUDA and HIP, and to WGSL, through the CrossGL IR
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
- crawler
- information-gathering
- cms-detector
- cloudflare-detection
:new: The Multi-Tool Web Vulnerability Scanner.
- scanner
- vulnerability-scanners
- scanner-web
- web-vulnerabilities-scanner
收集的文章 https://mrwq.github.io/tools/paper/
Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪
- llm-guardrails
- llm-security
- llm-jailbreaks
- llm-scanner
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
- python
- security
- security-vulnerability
- travis
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques
- nuclei
- nuclei-templates
- fuzzing-templates
- nucleifuzzer
Web vulnerability scanner written in Python3
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers across function-level, repository-level, agentic, and smart-contract detection, plus datasets, benchmarks, and surveys.
- awesome-list
- code-security
- large-language-models
- llm
A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
PoC for jsserver vulnerability in webOS 3.5+(?)
- exploit
- lg
- lgtv
- root
AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP integration.
- ai
- attack-surface-management
- bbot
- cybersecurity
A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected
- smart-contracts
- erc20-tokens
- vulnerabilities
- solidity